{"id":"CVE-2022-32903","state":"PUBLISHED","title":"A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel pr","description":"A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel privileges.","publishedAt":"2022-11-01T00:00:00.000Z","updatedAt":"2025-05-06T03:28:41.162Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"apple","products":["Apple iOS","Apple watchOS"],"affected":[{"vendor":"Apple","product":"iOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"9","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/HT213446","https://support.apple.com/en-us/HT213486","https://support.apple.com/en-us/HT213487"],"weaknesses":["CWE-416"],"ingestedAt":"2026-10-29T19:50:09.278Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/32xxx/CVE-2022-32903.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-32903","state":"PUBLISHED","datePublished":"2022-11-01T00:00:00.000Z","dateUpdated":"2025-05-06T03:28:41.162Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2022-06-09T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel privileges."}],"affected":[{"vendor":"Apple","product":"iOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"9","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/HT213446"},{"url":"https://support.apple.com/en-us/HT213486"},{"url":"https://support.apple.com/en-us/HT213487"}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"An app may be able to execute arbitrary code with kernel privileges"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2022-11-01T00:00:00.000Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.apple.com/en-us/HT213446","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213486","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213487","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T07:54:03.159Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-05-06T03:28:00.711627Z","id":"CVE-2022-32903","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-416","type":"CWE","lang":"en","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-06T03:28:41.162Z"}}]}}}